[Spring4Shell: Security Analysis of the latest Java RCE '0-day' vulnerabilities in Spring | LunaSec](https://www.lunasec.io/docs/blog/spring-rce-vulnerabilities/)
> Praetorian has confirmed that this is exploitable, but we still don't have all the details around how widespread or exploitable this is.
> Update: The authors of Spring have yet to make an official statement about this but are suspected to be working on a patch to mitigate the vulnerability.
www.lunasec.ioSpring4Shell: Security Analysis of the latest Java RCE '0-day' vulnerabilities in Spring | LunaSecWe've been taking a look at the new zero-day exploit, dubbed Spring4Shell, supposedly discovered in Spring Core to determine if it's a problem or not, as well as explained another RCE vulnerability found in Spring.
